ShareASale is one of the most widely used affiliate networks in the e-commerce space. Thousands of merchants use it to power their referral programs. However, its accessibility makes it a primary target for **affiliate marketing fraud**.
From form bots to late cookie injections, rogue publishers register on ShareASale to capture commissions on organic store conversions. Let's look at how to run a fraud investigation inside the ShareASale merchant console.
How fraud is executed in ShareASale
ShareASale tracks conversions using merchant pixel triggers:
- When a customer clicks an affiliate link, ShareASale sets a browser tracking cookie (`sscid`).
- If a user has a coupon extension active, the extension loads your affiliate link inside an invisible iframe during checkout.
- This background request overwrites the `sscid` tracking token with the extension's publisher ID.
- When the checkout completes, ShareASale attributes the commission fee to the extension, stealing credit for your organic or paid traffic.
Because the request is executed by the customer's browser, standard logs register it as a legitimate referral click.
Step-by-step ShareASale audit guide
To audit your ShareASale activity before approving monthly payouts, run these three data checks:
- Audit the Transaction Times Report: Go to **Reports > Transaction Details**. Export the CSV and calculate the time elapsed between click and purchase (CTCT). Flag any conversions where the CTCT is under **10 seconds**, which represents cookie stuffing.
- Review Geolocation Patterns: Check the IP addresses associated with affiliate clicks. If multiple signups from a partner share the same subnet range but list different consumer locations, they are using proxy obfuscation.
- Examine Referrer URL Logs: Look at the domain referrals. If the click referrer shows your own checkout page URL, the affiliate hijacked the cookie during checkout.
How BotRefund protects ShareASale programs
BotRefund tracks user actions leading up to checkout in real-time, monitoring network events, frame structures, and input timings.
By identifying when ShareASale tracking tokens are set on checkout pages without active customer clicks, BotRefund flags these conversions as overrides. Merchants can then decline the invalid commissions inside their ShareASale console, protecting their store margins.
Frequently Asked Questions
What is ShareASale affiliate fraud?
It is the process where publishers use cookie stuffing, automatic overrides, or form bots to capture commission payouts inside the ShareASale merchant program.
Does ShareASale filter out bot conversions?
ShareASale has basic tracking validation. However, they cannot inspect client-side browser extensions or monitor user behavioral telemetry on your storefront in real-time.
How do I void fraudulent commissions in ShareASale?
You can void pending commissions inside your ShareASale merchant console by selecting "Edit Transaction" and providing millisecond timing and referrer mismatch logs as the reason.